Extracted

• • Target
    DELIVERY DOCUMENTS.exe
  • Size 707KB
  • SHA256 cd4ee025ad3406b7e572952d42465eee19649cef6c0d3a6acbb0e972096988f4
  • MD5 427ef5f4e1143ad34c33b26dc4681661
  • SHA1 673fb1a58e4707ad783d03ca97b3fbd8b4cad73a
  • SHA512 b225afbb07853516f1b741e833e1a63026c0dc5adbb0c3fcfb48f8c6681bc770558499df3d3f5c17df45395dedc3624a1e8fa6498395ac20a82f44e27a61dfbb
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderzqzwloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2